CVE-2026-1148

Medium · 6.5

CVSS

6.5

EPSS

0.2%

Published

Jan 19, 2026

CISA due date

—

The record

A vulnerability was determined in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. This vulnerability affects unknown code. Executing a manipulation can lead to cross-site request forgery. It is possible to launch the attack remotely.

Affected packages

Ecosystem	Package	Introduced	Fixed